Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206215.roa
File: AS206215.roa (raw, json)
Hash identifier: ItW5Q3+fx2pUoS5YW/6qSQUNP87FlcyKxf2grIS+9s0=
Subject key identifier: 72:A5:38:50:C1:64:CD:26:55:98:BF:82:26:1B:13:13:E9:9E:E2:2D
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 2892B2DBBCE15C20294C62BD42BCFA8FB320243A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206215.roa
Signing time: Thu 09 Jul 2026 11:08:50 +0000
ROA not before: Thu 09 Jul 2026 11:03:50 +0000
ROA not after: Thu 08 Jul 2027 11:08:50 +0000
asID: 206215
IP address blocks: 2a0f:85c1:cc5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:92:b2:db:bc:e1:5c:20:29:4c:62:bd:42:bc:fa:8f:b3:20:24:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Jul 9 11:03:50 2026 GMT
Not After : Jul 8 11:08:50 2027 GMT
Subject: CN=72A53850C164CD265598BF82261B1313E99EE22D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:e2:44:1b:3a:73:5b:cc:00:8e:55:f9:bc:
e6:68:3e:34:89:be:0e:b8:75:b2:71:47:05:1c:94:
d2:2c:44:89:3a:cb:9b:4b:34:cc:df:d7:c6:fd:17:
5f:2d:c5:19:1f:c7:ae:b9:b0:d2:09:68:6b:cd:e6:
c4:f0:5c:dc:98:a5:75:64:55:03:04:3f:33:bb:c4:
b8:9a:a0:66:d7:c1:76:0a:ff:ef:69:20:d7:a5:37:
22:63:7e:ef:59:a2:1e:fd:60:45:24:74:4c:09:dc:
f9:b5:f2:d2:9d:a6:0b:9e:d6:ef:f2:31:ce:65:af:
05:6f:b0:b3:b1:08:07:9d:16:c3:29:b9:0b:dc:6d:
f8:78:7d:d1:be:52:0e:89:7a:96:7c:ed:1f:e4:c4:
b6:1b:d7:62:69:03:43:d7:d9:79:ae:bf:b7:fa:ce:
c9:1d:0f:e8:7c:82:68:bc:cb:c4:dd:c7:00:12:2b:
a7:fb:1c:a4:5b:00:ec:3d:7a:5f:2b:80:e8:78:41:
e2:51:29:a3:4d:85:05:61:71:97:cd:14:90:46:23:
b7:3c:26:2d:a3:36:3c:9f:06:bf:53:fa:ab:1f:76:
e4:89:76:81:60:6f:22:fc:c6:e7:7c:a7:bc:0c:06:
17:17:3b:0f:d3:84:94:60:9b:8a:b5:df:82:70:83:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A5:38:50:C1:64:CD:26:55:98:BF:82:26:1B:13:13:E9:9E:E2:2D
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS206215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:cc5::/48
Signature Algorithm: sha256WithRSAEncryption
97:95:5c:ad:f1:39:41:98:7c:a0:cf:59:04:09:f3:f2:ca:3c:
1b:9a:df:91:08:31:52:f0:9a:06:1e:e0:79:f4:ac:fc:61:7e:
08:6f:ed:1d:65:22:c6:ed:c0:eb:1a:7d:af:ad:17:25:f5:1b:
9a:3b:36:f7:a1:22:fe:b2:cb:10:2e:4b:44:81:48:7e:4e:39:
92:1c:b9:6f:f2:79:0d:d4:0c:3a:d4:82:d8:46:8b:54:15:3e:
93:c9:25:7d:6c:ba:0c:e0:98:c7:4f:f3:1c:1f:b1:89:a1:e6:
a9:7f:c9:de:1a:19:4a:aa:3a:51:a3:25:58:4b:32:df:b0:5d:
b9:da:da:a2:55:6b:cb:d6:f2:0b:5d:99:20:6b:83:91:3c:e2:
72:ac:d3:35:1f:44:ea:ad:b6:cb:7a:0d:55:4f:e9:e0:08:c8:
6f:e2:6b:e5:7c:d9:e6:1b:fb:cf:af:ac:b8:5b:c4:00:84:5c:
3e:ec:89:e5:de:5b:b3:b6:ec:61:e3:32:86:1e:ee:4a:82:c6:
a2:b1:60:b6:1a:5c:b3:51:aa:95:6c:28:c3:ac:5f:9d:7c:d7:
42:dd:37:eb:84:3c:27:31:30:cf:18:51:f2:80:fe:05:33:b0:
5f:fa:79:09:72:9c:78:07:6c:b1:66:e8:74:3f:34:39:b3:59:
e7:c9:1d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:49:03 2026 by rpki-client